Tobias Orlamuende wrote:
Hi folks,

I wanted to get up-to-date with implementing SA on qmail/vpopmail.
I had a look at vpopmail 5.5.1 (because of the SA-support in it), but I currently doesn't compile. Bug-report was sent.

What are possible implementations of SA on vpopmail?

Currently the cluster counts about 100k mailboxes with an average of ~ 10k messages an hour.
Simscan (and clamav) is already installed.
Users don't have do have individual settings (would be nice, but needs IMHO too much hacking in qmailadmin).

Can anybody provide success-stories or give advice which solution could fit for this installation?

Well, not sure if it helps as we currently have less than 10k users on our system.

We have two avhosts that run MailScanner, these then send the ClamAV scanned messages down to our toasters running vpopmail. Milter-ahead is installed and verifing addresses against CHKUSER on the toasters.

Each toaster runs spamc from a .qmail file with per user prefs. I could not sell or even give away spam filtering without per user prefs. That may be because most of my clients are commercial.

We have the Maildirs on a NFS mount from a Sparc Enterprize which also runs spamd. Each toaster connects to the same spamd on an inside interface running 1gb FDX, same interface as the NFS and MySQL. No issues there. Vpopmail user info and SA user prefs are stored in MySQL on the NFS server.

We had been running at 100k messages a day with peaks of 20k per hour. With the use of Milter-ahead and CHKUSER this has dropped by 60%. Dictionary attacks never make it inside anymore.

We have been experiencing problems with some spam, not completely certain of the cause. Periodicly we see qmail-local just stop, all processes waiting, concurrancy local maxed out. This is only happening on users with spam filtering enabled. I have just upgraded SA to 3.0.4 as they identifed a possible issue of malformed headers causing problems. I also suspect that the script we use may be the cause, it is a modified copy of ifspamh.

Overall, the combination of MailScanner + Milter-ahead -> qmail + vpopmail(MySQL) + CHKUSER + spamc -> NFS Maildir + spamd + MySQL has proven reliable and very configurable.

I can give specs on my servers if you like. Hope this helps.


Reply via email to